From e789c340dd658d54276202353fe7bf6d142d5b4c Mon Sep 17 00:00:00 2001 From: Roland Becker Date: Thu, 2 Sep 2010 10:33:35 +0200 Subject: [PATCH] Fix #12309: XSS issues when viewing Summary page --- core/summary_api.php | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/core/summary_api.php b/core/summary_api.php index c58a678..4950f4a 100644 --- a/core/summary_api.php +++ b/core/summary_api.php @@ -333,7 +333,7 @@ function summary_print_by_activity() { foreach( $t_summarydata as $row ) { $t_bugid = string_get_bug_view_link( $row['id'] ); - $t_summary = string_html_specialchars( $row['summary'] ); + $t_summary = string_display_line( $row['summary'] ); $t_notescount = $row['count']; print "\n"; @@ -377,7 +377,7 @@ function summary_print_by_age() { } $t_bugid = string_get_bug_view_link( $row['id'] ); - $t_summary = $row['summary']; + $t_summary = string_display_line( $row['summary'] ); $t_days_open = intval(( time() - $row['date_submitted'] ) / SECONDS_PER_DAY ); print "\n"; -- 1.7.2.2